It's not 90% of the apps on the store, and if it was then they should definitely ban it because there is no way 90% of the apps even need login accounts. The flashlight app still has no legitimate reason to access your contacts and location, much less Facebook.
Moreover, prohibiting this wouldn't actually remove the apps for more than five minutes because what would immediately follow is a version of the SDK that doesn't send any data to Facebook when you're not actually using a Facebook account.
Moreover, prohibiting this wouldn't actually remove the apps for more than five minutes because what would immediately follow is a version of the SDK that doesn't send any data to Facebook when you're not actually using a Facebook account.